GitHub-Advanced-Security Exam Training Practice Tests (GitHub Advanced Security GHAS)]

Question 1

Where can you find a deleted line of code that contained a secret value?

A. Dependency graph B. Insights C. Issues D. Commits

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Which of the following options are code scanning application programming interface (API) endpoints? (Each answer presents part of the solution. Choose two.)

A. List all open code scanning alerts for the default branch B. Modify the severity of an open code scanning alert C. Get a single code scanning alert D. Delete all open code scanning alerts

Correct Answer: A,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

The autobuild step in the CodeQL workflow has failed. What should you do?

A. Remove the autobuild step from your code scanning workflow and add specific build steps. B. Use CodeQL, which implicitly detects the supported languages in your code base. C. Remove specific build steps. D. Compile the source code.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Which alerts do you see in the repository's Security tab? (Each answer presents part of the solution. Choose three.)

A. Secret scanning alerts B. Code scanning alerts C. Repository permissions D. Security status alerts E. Dependabot alerts

Correct Answer: A,B,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

In a private repository, what minimum requirements does GitHub need to generate a dependencygraph? (Each answer presents part of the solution. Choose two.)

A. Dependency graph enabled at the organization level for all new private repositories B. Write access to the dependency manifest and lock files for an enterprise C. Read-only access to all the repository's files D. Read-only access to the dependency manifest and lock files for a repository

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Which Dependabot configuration fields are required? (Each answer presents part of the solution. Choose three.)

A. directory B. schedule.interval C. milestone D. package-ecosystem E. allow

Correct Answer: A,B,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Which of the following is the best way to prevent developers from adding secrets to the repository?

A. Enable push protection B. Make the repository public C. Configure a security manager D. Create a CODEOWNERS file

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

As a repository owner, you do not want to run a GitHub Actions workflow when changes are made to any .txt or markdown files. How would you adjust the event trigger for a pull request that targets the main branch?
(Each answer presents part of the solution. Choose three.)
* on:
* pull_request:
* branches: [main]

A. paths: B. - '/*.txt' C. - '/*.md' D. paths-ignore: E. - 'docs/*.md'

Correct Answer: B,C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

GitHub Advanced Security GHAS - GitHub-Advanced-Security Exam Practice Test